samba - Jan 2017 - AD DC Corrupt recycle bin in redirected folders

Hi everyone,

First off, I really don't know what to provide so please just ask what is
needed. Here's what I think is relevant starting with a brief description:

I have samba4 as AD DC for windows 10 clients. Roaming profiles are on a
share on the DC and are working perfectly. However, redirected folder, also
residing on the DC are not working as expected. I have yet to put my finger
on exactly how this is occurring but at some random time, usually a few
days, the user suddenly gets a warning that each recycle bin on /her/his
redirected folders is corrupt.

I manage the permissions on a Win7 station in the local LAN. When I login
to that station and check the permissions and ownership it appears fine to
me. However, if I check off the 'replace permissions and ownership...'
checkbox to re-apply (without changing anything) and have the user log
off/on everything returns to normal. A few days go by and the same issue
re-appears.

This is a pretty fresh setup. I install the AD DC on a brand new system,
created all the users from scratch and copied their docs over. (and set
permissions accordingly including a replace on subfolders for perms and
owner). Windows stations are also brand new and have the most recent MS
updates.

Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64
GNU/Linux

 samba                                 4.2.10+dfsg-0+deb8u3  amd64

redirected folders are: documents, favorites, desktop, cookies and start
menu applied via GPO as per wiki. (permissions initially set as per wiki as
well)

I know it's not advised to host shared files on the DC but was thinking
since they're not shares accessed by anyone else but the owner it would be
suitable to host them on the DC. I can host them on a separate samba
machine if that will resolve this (or make things simpler and at least help
in resolving this).

The only thing catching my eye in the logs is this:
 open_internal_pipe: Could not connect to lsarpc pipe:
NT_STATUS_UNSUCCESSFUL
[2016/12/07 12:24:28.522364,  0]
../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
  open_internal_pipe: Could not connect to dssetup pipe:
NT_STATUS_UNSUCCESSFUL

Like I said if there's something I can provide that's more relevant
please
just ask.
-- 
Regards,
Phil

Hai, 

If you up to it, try my debian packages.

http://downloads.van-belle.nl/samba4/ 
Read the README.txt

That gets you to samba 4.5.3. 
The debian 4.2.10 is really old and is buggy. 

Few things, 
Can you post your 

/etc/hosts
/etc/resolv.conf
/etc/nsswitch.conf
/etc/samba/smb.conf

And post the windows event id of when this is happening. 
Im running samba 4.5.3 with windows 7 and 10 and i havent seen the corrupted
recicly bin. That only happings if your rights are failty.
But i have this setting on my member server which containt all redirected
folders.
The setting:  acl_xattr:ignore system acl = yes
Man smb.conf for more info about that. 

! beware, re-aply all rights after you change this, so use with care if the
server is in production. ( share rights AND security rights )


Greetz, 

Louis
p.s. 
Out of the office tomorrow, so Rowland wil probely reply, 
but he wil ask for the same info. 



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Philippe
> LeCavalier via samba
> Verzonden: woensdag 18 januari 2017 16:44
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] AD DC Corrupt recycle bin in redirected folders
> 
> Hi everyone,
> 
> First off, I really don't know what to provide so please just ask what
is
> needed. Here's what I think is relevant starting with a brief
description:
> 
> I have samba4 as AD DC for windows 10 clients. Roaming profiles are on a
> share on the DC and are working perfectly. However, redirected folder,
> also
> residing on the DC are not working as expected. I have yet to put my
> finger
> on exactly how this is occurring but at some random time, usually a few
> days, the user suddenly gets a warning that each recycle bin on /her/his
> redirected folders is corrupt.
> 
> I manage the permissions on a Win7 station in the local LAN. When I login
> to that station and check the permissions and ownership it appears fine to
> me. However, if I check off the 'replace permissions and
ownership...'
> checkbox to re-apply (without changing anything) and have the user log
> off/on everything returns to normal. A few days go by and the same issue
> re-appears.
> 
> This is a pretty fresh setup. I install the AD DC on a brand new system,
> created all the users from scratch and copied their docs over. (and set
> permissions accordingly including a replace on subfolders for perms and
> owner). Windows stations are also brand new and have the most recent MS
> updates.
> 
> Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64
> GNU/Linux
> 
>  samba                                 4.2.10+dfsg-0+deb8u3  amd64
> 
> redirected folders are: documents, favorites, desktop, cookies and start
> menu applied via GPO as per wiki. (permissions initially set as per wiki
> as
> well)
> 
> I know it's not advised to host shared files on the DC but was thinking
> since they're not shares accessed by anyone else but the owner it would
be
> suitable to host them on the DC. I can host them on a separate samba
> machine if that will resolve this (or make things simpler and at least
> help
> in resolving this).
> 
> The only thing catching my eye in the logs is this:
>  open_internal_pipe: Could not connect to lsarpc pipe:
> NT_STATUS_UNSUCCESSFUL
> [2016/12/07 12:24:28.522364,  0]
> ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
>   open_internal_pipe: Could not connect to dssetup pipe:
> NT_STATUS_UNSUCCESSFUL
> 
> Like I said if there's something I can provide that's more relevant
please
> just ask.
> --
> Regards,
> Phil
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On Wed, Jan 18, 2017 at 10:43 AM Philippe LeCavalier <
support at plecavalier.com> wrote:
> Hi everyone,
>
> First off, I really don't know what to provide so please just ask what
is
> needed. Here's what I think is relevant starting with a brief
description:
>
> I have samba4 as AD DC for windows 10 clients. Roaming profiles are on a
> share on the DC and are working perfectly. However, redirected folder, also
> residing on the DC are not working as expected. I have yet to put my finger
> on exactly how this is occurring but at some random time, usually a few
> days, the user suddenly gets a warning that each recycle bin on /her/his
> redirected folders is corrupt.
>
> I manage the permissions on a Win7 station in the local LAN. When I login
> to that station and check the permissions and ownership it appears fine to
> me. However, if I check off the 'replace permissions and
ownership...'
> checkbox to re-apply (without changing anything) and have the user log
> off/on everything returns to normal. A few days go by and the same issue
> re-appears.
>
> This is a pretty fresh setup. I install the AD DC on a brand new system,
> created all the users from scratch and copied their docs over. (and set
> permissions accordingly including a replace on subfolders for perms and
> owner). Windows stations are also brand new and have the most recent MS
> updates.
>
> Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64
> GNU/Linux
>
>  samba                                 4.2.10+dfsg-0+deb8u3  amd64
>
> redirected folders are: documents, favorites, desktop, cookies and start
> menu applied via GPO as per wiki. (permissions initially set as per wiki as
> well)
>
> I know it's not advised to host shared files on the DC but was thinking
> since they're not shares accessed by anyone else but the owner it would
be
> suitable to host them on the DC. I can host them on a separate samba
> machine if that will resolve this (or make things simpler and at least help
> in resolving this).
>
> The only thing catching my eye in the logs is this:
>  open_internal_pipe: Could not connect to lsarpc pipe:
> NT_STATUS_UNSUCCESSFUL
> [2016/12/07 12:24:28.522364,  0]
> ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
>   open_internal_pipe: Could not connect to dssetup pipe:
> NT_STATUS_UNSUCCESSFUL
>
> Like I said if there's something I can provide that's more relevant
please
> just ask.
> --
> Regards,
> Phil
>
Anyone?
-- 
Regards,
Phil

On Thu, 26 Jan 2017 15:32:46 +0000
Philippe LeCavalier via samba <samba at lists.samba.org> wrote:
> On Wed, Jan 18, 2017 at 10:43 AM Philippe LeCavalier <
> support at plecavalier.com> wrote:
> 
> > Hi everyone,
> >
> > First off, I really don't know what to provide so please just ask
> > what is needed. Here's what I think is relevant starting with a
> > brief description:
> >
> > I have samba4 as AD DC for windows 10 clients. Roaming profiles are
> > on a share on the DC and are working perfectly. However, redirected
> > folder, also residing on the DC are not working as expected. I have
> > yet to put my finger on exactly how this is occurring but at some
> > random time, usually a few days, the user suddenly gets a warning
> > that each recycle bin on /her/his redirected folders is corrupt.
> >
> > I manage the permissions on a Win7 station in the local LAN. When I
> > login to that station and check the permissions and ownership it
> > appears fine to me. However, if I check off the 'replace
> > permissions and ownership...' checkbox to re-apply (without
> > changing anything) and have the user log off/on everything returns
> > to normal. A few days go by and the same issue re-appears.
> >
> > This is a pretty fresh setup. I install the AD DC on a brand new
> > system, created all the users from scratch and copied their docs
> > over. (and set permissions accordingly including a replace on
> > subfolders for perms and owner). Windows stations are also brand
> > new and have the most recent MS updates.
> >
> > Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19)
> > x86_64 GNU/Linux
> >
> >  samba                                 4.2.10+dfsg-0+deb8u3  amd64
> >
> > redirected folders are: documents, favorites, desktop, cookies and
> > start menu applied via GPO as per wiki. (permissions initially set
> > as per wiki as well)
> >
> > I know it's not advised to host shared files on the DC but was
> > thinking since they're not shares accessed by anyone else but the
> > owner it would be suitable to host them on the DC. I can host them
> > on a separate samba machine if that will resolve this (or make
> > things simpler and at least help in resolving this).
> >
> > The only thing catching my eye in the logs is this:
> >  open_internal_pipe: Could not connect to lsarpc pipe:
> > NT_STATUS_UNSUCCESSFUL
> > [2016/12/07 12:24:28.522364,  0]
> > ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
> >   open_internal_pipe: Could not connect to dssetup pipe:
> > NT_STATUS_UNSUCCESSFUL
> >
> > Like I said if there's something I can provide that's more
relevant
> > please just ask.
> > --
> > Regards,
> > Phil
> >
> 
> Anyone?
Perhaps this might help:

http://www.ieple.com/blog/fixing-corrupted-recycle-bin-in-redirected-folders-server-2012-r2-essentials

Rowland

On Thu, Jan 26, 2017 at 10:32 AM Philippe LeCavalier <
support at plecavalier.com> wrote:
> On Wed, Jan 18, 2017 at 10:43 AM Philippe LeCavalier <
> support at plecavalier.com> wrote:
>
> Hi everyone,
>
> First off, I really don't know what to provide so please just ask what
is
> needed. Here's what I think is relevant starting with a brief
description:
>
> I have samba4 as AD DC for windows 10 clients. Roaming profiles are on a
> share on the DC and are working perfectly. However, redirected folder, also
> residing on the DC are not working as expected. I have yet to put my finger
> on exactly how this is occurring but at some random time, usually a few
> days, the user suddenly gets a warning that each recycle bin on /her/his
> redirected folders is corrupt.
>
> I manage the permissions on a Win7 station in the local LAN. When I login
> to that station and check the permissions and ownership it appears fine to
> me. However, if I check off the 'replace permissions and
ownership...'
> checkbox to re-apply (without changing anything) and have the user log
> off/on everything returns to normal. A few days go by and the same issue
> re-appears.
>
> This is a pretty fresh setup. I install the AD DC on a brand new system,
> created all the users from scratch and copied their docs over. (and set
> permissions accordingly including a replace on subfolders for perms and
> owner). Windows stations are also brand new and have the most recent MS
> updates.
>
> Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.36-1+deb8u2 (2016-10-19) x86_64
> GNU/Linux
>
>  samba                                 4.2.10+dfsg-0+deb8u3  amd64
>
> redirected folders are: documents, favorites, desktop, cookies and start
> menu applied via GPO as per wiki. (permissions initially set as per wiki as
> well)
>
> I know it's not advised to host shared files on the DC but was thinking
> since they're not shares accessed by anyone else but the owner it would
be
> suitable to host them on the DC. I can host them on a separate samba
> machine if that will resolve this (or make things simpler and at least help
> in resolving this).
>
> The only thing catching my eye in the logs is this:
>  open_internal_pipe: Could not connect to lsarpc pipe:
> NT_STATUS_UNSUCCESSFUL
> [2016/12/07 12:24:28.522364,  0]
> ../source3/winbindd/winbindd_cm.c:1670(wb_open_internal_pipe)
>   open_internal_pipe: Could not connect to dssetup pipe:
> NT_STATUS_UNSUCCESSFUL
>
> Like I said if there's something I can provide that's more relevant
please
> just ask.
> --
> Regards,
> Phil
>
>
> Anyone?
> --
> Regards,
> Phil
>
Just wanted to clarify that the problem isn't the corrupt recycle bin
error. Once this happens the user is denied all access to the redirected
folders- I just mentioned the recycle bin because that's the first error
the user sees.

I've revisited the wiki on redirected folders many many times to no avail.
Yet placing a checkmark on replacing permissions for subfolders in advanced
fixes the problem every time. Any insight whatsoever would be greatly
appreciated! I'm forced to fix this 2 or 3 times a day now.
-- 
Regards,
Phil